R School District is attacked by a hacker who demands $$$ to keep stolen data secret. What type of attack is this?

maybe they should've patched that vulnerability huh, ransomware

What is the most effective strategy to protect yourself on the internet?

keep your personal data as private as possible

What is penetration testing?

when a hacker attacks a computer system to find and fix its vulnerabilities, something you should get paid for!

What is the purpose of a company's password policy document?

guide administrators to create strong passwords

R School District is targeted by a private cyberattack that exposes non-sensitive student data. What to do?

patch the vulnerability as quickly as possible

a common language to manage databases

What is a dictionary attack?

a form of brute force attack that uses words instead of single characters

What does a web beacon do?

monitor the time you spend on the site, what you click on, etc., check how often you access certain content

Why is the CIA Triad important to keep in mind?

helps you find vulnerabilities in systems and software, provides a checklist for secure cyber design

What does the Domain Name System (DNS) do?

connects domain names (URLs) with a site's IP address

How to protect against SQL injection attacks?

use prepared statements, use parameterized queries

A website that does NOT have https:// in its URL when you visit it could most possibly lead to...

your information being stolen over the network

How does a SQL injection attack work?

adding a snippet of SQL code to end of existing SQL query to change data

What is a persistent cookie most used for?

keep you logged in upon system restart

What is NOT a quality of a Secure Hashing Algorithm (SHA)?

can be cracked by knowing the encryption algorithm

A session cookie is primarily used to

keep you logged in until you log out

studbud

CS@SC: Cybersecurity Level 1

27 termsStudBud Administration25 plays

Imported from external platform

Flashcards27 cardsFPractice quizPHost liveL

Questions 27

Answers

1
R School District is attacked by a hacker who demands $$$ to keep stolen data secret. What type of attack is this?
maybe they should've patched that vulnerability huh
stolen info attack
pirating
ransomware
2
What is the most effective strategy to protect yourself on the internet?
use strong passwords
keep your personal data as private as possible
get gud..just don't get hacked
frequently use a VPN
3
What does a VPN (Virtual Private Network) do? It...
hides your IP address
changes your IP address
disguises your private IP address
costs money :(
4
What does the "C" in the CIA Triad stand for?
communication
confidence
cybersecurity
confidentiality
5
What is penetration testing?
when a coder inspects the code of a system to find its vulnerabilities
when a hacker attacks a computer system to find and fix its vulnerabilities
hacking but not illegal
something you should get paid for!
6
What is the purpose of a company's password policy document?
guide administrators to create strong passwords
guide normal users to create strong passwords
define how the company would respond to user password theft
to make sure no one makes a dumb password
7
R School District is targeted by a private cyberattack that exposes non-sensitive student data. What to do?
patch the vulnerability as quickly as possible
continue as normal; the students will live!
just punish the attacker
shut down the system indefinitely and work on patching the vulnerability
8
What is SQL?
a common language to manage databases
a database
a type of attack that edits data stored in a server
a widely-used language to add interactive scripts to websites
9
What is a dictionary attack?
a form of brute force attack that uses words instead of single characters
a form of attack that targets only users w/ dictionary words in their names
attacks that use a digital structure called a dictionary (key/value pairs)
attack that involves hurling a webster's dictionary at the target computer
10
If a hacker gets your IP address, what could they NOT do?
learn the location of your Internet Service Provider (ISP)
get closer to using your computer in a DDOS attack
steal your identity
get DDOS'd if your internet provider lacks the proper security
11
What does a web beacon do?
monitor the time you spend on the site, what you click on, etc.
check how often you access certain content
keep you logged in unless you clear your browser cache
directly transfers your data to outside parties
12
Why is the CIA Triad important to keep in mind?
they summarize what you need to know about cybersecurity
helps you find vulnerabilities in systems and software
provides a checklist for secure cyber design
it'll pay the bills someday
13
Dude clicks on a link to get $500. He logs in, gets info stolen, and the link gets sent to all his following. This is..
a worm
phishing
a logic bomb
kinda dumb
14
Your IP address at home will be different than your IP address at work
False
I work remotely...........
True
15
What attack does internet encryption protocols prevent?
rootkit
SQL injection
man in the middle
phishing
16
What does the Domain Name System (DNS) do?
accesses the database of a site to retrieve tables of key info
directly retrieves a site's code and files
links frontend to backend (ex: appearance of site -> database of info)
connects domain names (URLs) with a site's IP address
17
How to protect against SQL injection attacks?
use prepared statements
encrypt your SQL queries
avoid changing database data
use parameterized queries
18
Which password is the strongest?
under_the_sea
qwertyuiop
a$$e$s
l33T$
19
A website that does NOT have https:// in its URL when you visit it could most possibly lead to...
your information being stolen over the network
sadness
your information being stolen by the site
your information being stolen by the server
20
____ has the most impact on extending the time it takes to brute force a password
making sure you don't repeat any characters
the length
making sure it isn't a word
the # of different character types (upper/lowercase, symbol, special char)
21
How does a SQL injection attack work?
adding a snippet of SQL code to terminal command to take control of server
adding a snippet of SQL code to ur mom
adding a snippet of SQL code to end of existing SQL query to change data
adding a snippet of SQL code to the HTML of a website using inspect element
22
What is a persistent cookie most used for?
keep you logged in unless you clear your browser cache
keep you logged in upon system restart
check how often you access certain content
directly transfer your data to outside parties
23
What is NOT a quality of a Secure Hashing Algorithm (SHA)?
can be cracked with brute force
can be cracked by knowing the encryption algorithm
a one-way cryptographic function
a form of encryption
24
What does the "I" in the CIA Triad stand for?
independence
injection
integrity
insularity
25
Laura opens a folder containing an innocent-looking pdf sent by an impersonator of her boss. She gets a virus! This is..
worm
ransomware
phishing
trojan horse
26
What does the "A" in the CIA Triad stand for?
availability
associative
antisymmetric
accountability
27
A session cookie is primarily used to
track your personal data for the developer to analyze
monitor the time you spend on the site, what you click on, etc.
keep you logged in until you log out
record data to sell to advertisers

CS@SC: Cybersecurity Level 1 Flashcards | StudBud